CVE-2021-29370

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...

CVE-2021-29370

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...

Cross site scripting

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...

CVE-2021-29370

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...

CVE-2021-29370

CVE-2021-29370 is a UXSS vulnerability in the Thanos-Soft Cheetah Browser (Android 1.2.0) caused by an inadequate filter of the intent scheme, enabling cross-site scripting on any website. Affected component: the browser’s handling of intents; root cause: insufficient input filtering. Documented ...

Thanos-soft Cheetah Browser 跨站脚本漏洞

Thanos-soft Cheetah Browser is an application from Thanos-soft. A browser. A cross-site scripting vulnerability exists in Thanos-Soft Cheetah Browser in Android 1.2.0, which stems from an insufficient filter in the intent scheme. It results in cross-site scripting being required for any website o...

Binary Vulnerability in Driver Wizard Standard Edition of Beijing Cheetah Mobile Technology Co.

Driver Wizard is a driver management and maintenance tool that integrates driver management and hardware detection. A binary vulnerability exists in the standard version of Driver Wizard by Beijing Cheetah Mobile Technology Company Limited, which can be exploited by attackers to cause a system...

Cheetah free wifi input validation error vulnerability

Cheetah free wifi is a calculator wireless network sharing software from China Cheetah Mobile Cheetah. An input validation error vulnerability exists in the liebaonat.sys file in Cheetah free wifi version 5.1, which originates from the program not validating the input value of IOCtl 0x830020f8,...

CVE-2020-13646

In Cheetah free WiFi 5.1, the driver file liebaonat.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020f8, 0x830020E0, 0x830020E4, or 0x8300210c...

CVE-2020-13646

In Cheetah free WiFi 5.1, the driver file liebaonat.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020f8, 0x830020E0, 0x830020E4, or 0x8300210c...

Design/Logic Flaw

In Cheetah free WiFi 5.1, the driver file liebaonat.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020f8, 0x830020E0, 0x830020E4, or 0x8300210c...

CVE-2020-13646

CVE-2020-13646 affects Cheetah free WiFi 5.1. The liebaonat.sys driver does not validate input values for IOCTLs 0x830020f8, 0x830020E0, 0x830020E4, or 0x8300210c, enabling local attackers to cause a denial of service (BSOD) or possibly other impact. Root cause: input validation failure in IOCTL ...

CVE-2020-13646

In Cheetah free WiFi 5.1, the driver file liebaonat.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020f8, 0x830020E0, 0x830020E4, or 0x8300210c...

openSUSE: Security Advisory for yast2-rmt (openSUSE-SU-2020:0253-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0253-1 Security update for yast2-rmt

This update for yast2-rmt fixes the following issues: yast2-rmt was updated to release version 1.2.2: - CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely boo1119835...

Cheetah Mobile's Cheetah Browser suffers from dll hijacking vulnerability

Cheetah Browser is an easy-to-use browsing service that will bring you convenient help in a short period of time. Cheetah Mobile's Cheetah Browser has a dll hijacking vulnerability that can be exploited by attackers to cause a user's computer to be remotely controlled or implanted with a Trojan...

Security update for yast2-rmt (moderate)

openSUSE Security Update: Security update for yast2-rmt Announcement ID: openSUSE-SU-2019:1089-1 Rating: moderate References: 1119835 1120672 1123562 Cross-References: CVE-2018-20105 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...

openSUSE Security Update : yast2-rmt (openSUSE-2019-1089)

This update for yast2-rmt to 1.2.2 fixes the following issues : Security issue fixed : - CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely bsc1119835 Non-security issues fixed : - Launch as root from gnome-shell menu bsc1123562 - Remove broken hyperlink from help bsc1120672 This...

Cheetah Mobile Blames SDKs for Rampant Ad Fraud in Its Android Apps

Cheetah Mobile is finding itself in a swirl of media attention after being accused of developing mobile apps that contain deliberate ad fraud features. But the mobile giant says it didn’t do it. The Chinese developer, which is listed as a top provider in Google Play’s tool app category, offers...

Popular Android apps on Play Store caught defrauding users

By Waqas A well-known Chinese app developer Cheetah Mobile and one of its subsidiaries Kika Tech might have claimed credit for millions of dollars from advertisers through an Android fraud scheme, reveals app analytics firm Kochava. It is a common practice for mobile app developers to generate...